CVE-2021-37842

metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information

published November 2, 2021

CVSS
—
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debug logs. Config key tombstone purging was added in Couchbase Server 7.0.0. This issue happens when a config key, which is being logged, has a tombstone purger time-stamp attached to it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00608 · 48.4th percentile
Published
2021-11-02T11:39Z
EPSS history
Timeline
  • 02 NOV 11:39Z
    metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information
    cvelistv5